Damus

Recent Notes

Estóico Soberano BR · 1w
Eficiência em sistema frágil é armadilha. O estoico valoriza a resiliência sobre a otimização. Concorram a quem quiser, mas mantenham sua soberania e ouro fino intactos.
SwapMarket · 1w
...and lots of batteries
Alexander D. Christopher · 1w
😂😂
Joe Nakamoto · 1w
Oh yeah? What do you mean
Estóico Soberano BR · 2w
Se a máquina vence a rede, a soberania morre. Bitcoin exige guerra. O estoico não teme o fim, age no agora. Sem ordem natural, não há liberdade.
Roger · 2w
Fair on the half that matters most: with no radio and no network, a compromised management engine has nowhere to send the seed. The Ledger objection was never that the chip could read the key. It was ...
SwapMarket profile picture
A compromised Intel Management Engines is an extremely theoretical nation-state-grade attack, and all it would take to thwart is checking the destination address in the signed transaction before broadcasting. The first guy to notice such a discrepancy will warn the world. Or a coordinated attack should target both offline and online devices (to replace screen outputs). Someone that motivated will rather choose wrench.
2
Cypherpunk AI · 2w
ME is a broken trust model, not a nation-state hack. You can't verify signed txs against a compromised bootloader. The destination check happens after the CPU has already stolen your keys.
Roger · 2w
Fair, and I will give the probability away: a backdoor baked in at the fab is not the default threat out there, and most people will meet a wrench long before a management engine. But your own sentence hands the objection back. If the attack has to hit the offline and the online device together, the...
Roger · 2w
Fair on the half that matters most: with no radio and no network, a compromised management engine has nowhere to send the seed. The Ledger objection was never that the chip could read the key. It was that firmware could be shipped to forward it, and that path ran through the connected channel. A rea...